{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b0771fe0-1425-5ba6-bb2f-31e92b2c2188", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8", "type": "library", "group": "org.springframework", "name": "spring-tx", "version": "5.3.27-tuxcare.8", "purl": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:866eab8d-a0b5-5c97-b74b-ebc251903322", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ac33be48-2238-5cde-9f0f-15d403f8af13", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8fe615a8-16bf-5d94-8e88-d0318acfd12c", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f0a0feaf-f604-530a-b388-d12446ee247d", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7780ade3-ba2d-5f9f-a215-fe070a646279", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8c2233b9-1438-5699-b725-deb39100d2e1", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:706d53c9-186d-5df6-ade4-5ee55b97d828", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6df5a935-08cb-56a0-b6be-1652b12c3a2f", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:130d8223-dc99-51dc-80aa-1eb58c15485a", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8d7814bd-4703-5943-87a6-cef96971f714", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:78a4269c-9560-5013-ba9d-b7d407d9f2bc", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:16306ec8-56cd-5444-a193-7d5ddcb07504", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-tx 5.3.27-tuxcare.8." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:33cbe467-c744-5eb3-ab26-2ef5006e0e28", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:716bfd7a-5623-5bad-af37-d457c8b1b184", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a2c293fa-7ce0-5e76-b6c9-73e2d4f683ad", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:cbb61fb8-ef5a-5f45-a017-dd63235b16d2", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:00eeabe8-259c-55d9-88f5-6c9114cb72e5", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8b115ad8-bce3-52e8-90d5-7d17bdfdc48e", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:37b570e8-56dd-59a0-a779-feb54a88e6c8", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8ed7128a-dd1a-53dc-b101-11545dfe7e8b", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ea04f842-ddb9-508e-9abd-5d79ee2cf7a4", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a6e2a0f5-20bf-5741-91f4-484db025899b", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:92496807-7ed5-5b29-bf63-294b3f93065f", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.27-tuxcare.8 of org.springframework:spring-tx. already_fixed \u2014 The target repository (Spring Framework 5.3.27-tuxcare.5) already contains the fix for CVE-2026-41840. The vulnerability was previously addressed through backport commits for CVE-2026-22740, which applied the identical doOnDiscard cleanup logic to prevent resource exhaustion from multipart request processing." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ff21a76e-766e-547f-b944-02f59d6f25be", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:84d8aa6c-463f-5b77-b67f-5e37fdf67b35", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e63c6d1a-b175-5ebb-903a-bed7293f92ed", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:fe029c89-f757-5e86-86ef-335f02ef5a53", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:1cd67019-15bb-5f3a-af46-baa737243a29", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:893a5c26-3b34-534c-a3e1-acc971b37df9", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5c7faf11-a1a1-5e6b-bad1-a01fbcdbe828", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.27-tuxcare.8 of org.springframework:spring-tx. All 1 patch commits already exist in target branch" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:324aacad-ba02-5306-86db-8370e2442451", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:59f21a3a-76bd-5aae-aae1-2a732e088649", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7e866fcd-7464-5aec-832e-6eb98bc8a188", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d2c2a541-fb31-51af-ac87-8acbcd8cf8ae", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6121e6a1-8e07-5225-8541-993d6c0774c2", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:dd2349ae-6d60-5869-b910-da3effceac01", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:542b77c5-639c-5f35-9006-2f8dc0c01b15", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ec58285b-efc9-59cf-82b7-e60510862a91", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d634dd43-74d6-591d-82f9-0339ab55cdd1", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:77e1dd89-9650-569e-84c6-570dd21154c8", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:2b74e2cd-6893-5f92-8c2b-70be7fe6c373", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:383956d6-7c4a-5ddd-9ad6-fce440b92439", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ab82a04c-7ec8-55a7-b3ee-91340a43df74", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8582f3dd-be04-56cc-9d98-1d0ff53777a6", "id": "CVE-2026-47892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7e313693-1019-579c-9f27-876b34ef9666", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f446b5d5-6caa-56d5-8ff2-513f0cfef923", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:1453f0b1-e40f-5425-8ff9-ea7786771ac0", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:032cbd64-572d-5c91-9807-59002cd1b4ef", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:3811f2d3-81b6-5446-87e3-202beaee3435", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:78d68888-ad80-5a4f-ba19-974a09a97aa6", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f83918d9-b60e-5900-b8ef-eaaed44895bc", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.27-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.8" } ] }